Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T2062, the corresponding Phabricator task for complete and up-to-date bug report information.

Bug 62 - Redirects to potentially annoying/harmful special pages like [[Special:Userlogout]] work

Summary:	Redirects to potentially annoying/harmful special pages like [[Special:Userlo...

Status: RESOLVED FIXED Product: MediaWiki Classification: Unclassified Component: Redirects (Other open bugs) Version: 1.3.x Hardware: All All Importance: High major with 1 vote (vote) Target Milestone: --- Assigned To: Nobody - You can work on this! URL: http://www.wikipedia.org/wiki/User:Gu... Whiteboard: Keywords: Depends on: Blocks:   Show dependency tree / graph		Reported: 2004-08-16 05:02 UTC by Guanaco Modified: 2010-05-15 15:29 UTC (History) CC List: 1 user (show) timwi See Also: Web browser: --- Mobile Platform: --- Assignee Huggle Beta Tester: ---

Attachments Add an attachment (proposed patch, testcase, etc.)

Description Guanaco 2004-08-16 05:02:20 UTC Redirects that point to pages like [[Special:Userlogout]] will log the user out. This has been used to vandalize user pages by Michael and/or Mike Church. A "confirm" button could be added to the logout page to prevent this from working. Comment 1 Timwi 2004-08-16 05:04:59 UTC JeLuf just made redirects to [[Special:Userlogin]] impossible. As far as I'm aware, he also put the change live already. Comment 2 Brion Vibber 2004-08-16 05:06:02 UTC This doesn't stop all possibilities; [[Special:Userlogout/Yomomma]] works for instance. Re-opening. Comment 3 Tim Starling 2004-09-11 11:51:09 UTC Fixed in HEAD with Article.php 1.224